Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/KmDtCTDoB2JB0ST9YvyrYqxxuR4.roa
File: KmDtCTDoB2JB0ST9YvyrYqxxuR4.roa (raw, json)
Hash identifier: LWshOZSdktNUa9vicDfwjHaB+g8nHacmtSCEfUj+8MQ=
Subject key identifier: 2A:60:ED:09:30:E8:07:62:41:D1:24:FD:62:FC:AB:62:AC:71:B9:1E
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 018CC26D4BC71980F35C73374EA2D4D057C3
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/KmDtCTDoB2JB0ST9YvyrYqxxuR4.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60855
IP address blocks: 185.24.184.0/24 maxlen: 24
185.24.184.0/23 maxlen: 23
185.24.186.0/24 maxlen: 24
185.24.186.0/23 maxlen: 23
185.24.185.0/24 maxlen: 24
185.24.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4b:c7:19:80:f3:5c:73:37:4e:a2:d4:d0:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a60ed0930e8076241d124fd62fcab62ac71b91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:89:9e:a5:36:b3:38:d6:ae:ae:df:0b:48:
7b:dd:61:81:86:db:15:a4:48:7f:d6:24:03:a5:5d:
71:b8:50:0f:48:df:08:aa:1d:59:6b:92:90:87:1f:
65:80:aa:b2:58:1f:40:ae:7a:1b:0a:be:c2:c8:bc:
24:35:34:15:c0:3e:ea:11:37:4a:5f:cb:da:a2:7a:
24:61:50:41:7d:66:92:03:3b:d1:51:95:59:54:9c:
f0:55:1d:5e:74:f1:65:84:49:76:03:1a:32:42:85:
8d:2e:77:60:67:2b:e5:fc:f7:ff:a5:17:a4:15:47:
2c:bf:a8:2b:1d:ca:ad:84:8b:ec:b4:5c:d0:d6:01:
da:a6:87:4b:64:10:0a:24:c1:72:3b:d8:32:fc:ee:
1d:8c:a1:25:3c:f4:6f:82:6c:f1:c7:fa:b1:35:81:
33:e6:c6:ea:7c:65:96:a4:98:36:a5:56:d3:de:47:
8b:d3:31:a1:fc:06:3c:e4:37:cb:47:1d:f1:8d:67:
a0:5a:54:69:7e:53:29:5b:c6:d2:2a:a4:e1:41:73:
65:0e:84:68:02:2a:a0:71:e2:42:e8:ad:2b:33:6f:
fb:92:db:33:dd:b2:ec:9a:16:5e:b4:42:18:cc:b9:
46:00:31:9b:44:8e:3c:79:8c:b6:c9:f5:8a:48:34:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:ED:09:30:E8:07:62:41:D1:24:FD:62:FC:AB:62:AC:71:B9:1E
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/KmDtCTDoB2JB0ST9YvyrYqxxuR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.184.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a0:94:ef:e0:1a:fc:78:a0:e9:ff:96:cf:46:64:41:68:d8:
c3:2b:bd:c4:98:a8:fe:42:1a:18:88:1c:22:d4:b0:30:fc:ca:
2e:f7:c5:73:6e:3d:b9:5d:ad:6c:c2:a3:09:71:73:c3:74:fd:
46:6e:c5:c3:f0:50:e5:fa:b0:02:2e:3d:03:d6:05:e1:f1:65:
91:71:55:ad:12:2e:bb:ca:c8:6b:8a:8d:10:ee:3d:f6:34:40:
66:03:29:e2:61:d7:2c:71:bc:38:e4:73:76:d5:e4:ac:21:3f:
85:5e:71:59:70:92:d8:67:0f:4e:ae:37:33:22:21:7c:8c:af:
a6:38:95:20:7f:e1:08:27:da:65:60:eb:fc:7a:56:a5:7a:5d:
aa:3e:f3:ad:0f:f0:a3:ad:87:22:00:37:ea:9d:b5:31:1b:4c:
51:cd:0e:8f:ea:05:c7:35:8b:0f:b1:ea:89:77:5c:50:5e:50:
6b:d5:ed:bf:c9:a4:cd:a7:ae:50:87:49:bf:07:f3:27:a4:38:
e1:2d:5f:43:56:25:0a:b4:32:b6:10:c6:d3:9f:14:f5:ff:9f:
8e:a6:23:68:e0:66:52:08:c7:aa:e5:ac:1c:ab:e7:3a:5f:f0:
63:6f:41:8b:89:f0:69:3e:9d:27:03:5b:09:ea:db:8e:22:f9:
cc:8d:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:29:46 2025 by rpki-client